-
The Bank
-
The Bank - Column 1
- About the Banco de Portugal
- Sustainability
- Foreign exchange authority
-
The Bank - Column 2
-
Organisation
- Organisation chart
- Governor
- Board of Directors
- Distribution of remits and delegation of powers of the Board of Directors
- Board of Directors' Calendars
- Advisory Board
- Board of Auditors
- Internal audit
- Data protection policy
- Valora, S.A.
- Sociedade Gestora dos Fundos de Pensões
- National Council of Financial Supervisors
- Fintech +
- Recruitment
-
Organisation
-
The Bank - Column 3
- International activity
- Public consultations
- See more
- Media
-
Media - Column 1
- Press releases
- Public speeches
-
Media - Column 2
- Calendar
- Media - Column 3
- Publications and research
-
Publications - Column 1
- Economic Bulletin
- Estabilidade Financeira
- Política monetária
-
Publications - Column 2
- Pagamentos
- Notas e moedas
- Publications
-
Outras publicações
-
Publications - Column 3
- Research
- Economics in a picture
- Monographs and series
-
- Mission and tasks
-
Statistics
-
Coluna 1 - Estatística
- Introduction
-
Coluna 2 - Estatística
- Reporting obligations
- SDDS Plus
- Coluna 3 - Estatística
-
Coluna 1 - Estatística
-
Supervision
-
Column 1 - Supervision
- Single Supervisory Mechanism
- Prudential rules
- Macroprudential
- Banking conduct supervision
-
Column 2 - Supervision
-
Microprudential
- Objectives and principles
- Priorities
- Supervisory Review and Evaluation Process
- Duty to report
- Reporting obligations of supervised institutions
- Authorisations
- Supervision of culture and governance
- Suitability of members of the management and supervisory bodies and key function holders
- Adequação dos titulares de funções essenciais
- Suitability of qualifying shareholders
- European Market Infrastructure Regulation (EMIR)
- Forum on Cybersecurity and Operational Resilience
- See more
-
Microprudential
-
Column 3 - Supervision
-
Money laundering and terrorist financing
- Banco de Portugal's functions
- Financial Action Task Force
- Restrictive measures
- Registration of virtual assets service providers
- Report on the activity carried out in Portugal under the freedom to provide services
- Documents
- Legislation and rules
- Forum on the Prevention of Money Laundering and Terrorist Financing
- Illicit financial activity
- Brexit
-
Money laundering and terrorist financing
-
Column 1 - Supervision
-
Monetary policy
- Column 1 - Monetary policy
-
Column 2 - Monetary policy
- Interest rates
- Implementation
- Column 3 - Monetary policy
-
Payment systems
-
Column 1 - Payment systems
- Introduction
- Confirmation of Payee/Payer and SPIN
- Digital Euro
-
Column 2 - Payment systems
- Payment instruments
- Payment services under the PSD2
- Virtual assets
-
Column 3 - Payment systems
- Market Infrastructure
- Cooperation with the market
- See more
-
Column 1 - Payment systems
-
Banknotes and coins
- Column 1 - Banknotes and coins
-
Column 2 - Banknotes and coins
- Current coins
- Commemorative and collector coins
- Column 3 - Banknotes and coins
-
The Bank - Column 1
Anterior
-
The Bank
- voltar
- The Bank
-
About the Banco de Portugal
- voltar
- About the Banco de Portugal
- Mission and tasks
- Statute
- Legal Framework of Credit Institutions and Financial Companies
- Strategic plan
- Ethics and conduct
- History
-
Sustainability
- voltar
- Sustainability
- Approach to sustainability
- Social responsibility
-
Foreign exchange authority
- voltar
- Foreign exchange authority
- Banco de Portugal's functions
- Global code
-
Organisation
- voltar
- Organisation
- Organisation chart
- Governor
- Board of Directors
- Distribution of remits and delegation of powers of the Board of Directors
- Board of Directors' Calendars
- Advisory Board
- Board of Auditors
- Internal audit
- Data protection policy
- Valora, S.A.
- Sociedade Gestora dos Fundos de Pensões
- National Council of Financial Supervisors
-
Fintech +
- voltar
- Fintech +
- What is it and how does it work?
-
Recruitment
- voltar
- Recruitment
- See job opportunities
- International activity
-
Public consultations
- voltar
- Public consultations
- Banco de Portugal
- EBA
- Other institutions
- See more
-
Media
- voltar
- Media
-
Press releases
- voltar
- Press releases
- Banco de Portugal
- European Central Bank
- SSM
- EBA
- ESRB
-
Public speeches
- voltar
- Public speeches
- Governor
- Board members
- All
-
Calendar
- voltar
- Calendar
- Events
- Publications
- Indicators
- All
- See media contacts
-
Publications and research
- voltar
- Publications and research
-
Economic Bulletin
- voltar
- Economic Bulletin
- See all
- Accessible summary
- Projeções económicas
- Estabilidade Financeira
-
Política monetária
- voltar
- Política monetária
- Relatório da Implementação da Política Monetária
- Pagamentos
-
Notas e moedas
- voltar
- Notas e moedas
- Relatório da Emissão Monetária
- Boletim Notas e Moedas
- Publications
-
Outras publicações
- voltar
- Outras publicações
- Research
- Economics in a picture
-
Monographs and series
- voltar
- Monographs and series
- Order publications
- See publications
- Publicação em destaque 1
- Publicação em destaque 2
-
Mission and tasks
- voltar
- Mission and tasks
-
Statistics
- voltar
- Statistics
-
Introduction
- voltar
- Introduction
- Banco de Portugal Statistics
- Statistical events
-
Reporting obligations
- voltar
- Reporting obligations
- Reporting obligations for statistical purposes
- List of entities for statistical purposes
- SDDS Plus
- Browse data
-
Supervision
- voltar
- Supervision
-
Single Supervisory Mechanism
- voltar
- Single Supervisory Mechanism
- How does it work?
- Press releases
- Prudential rules
-
Macroprudential
- voltar
- Macroprudential
- Macroprudential policy
- Macroprudential measures
-
Banking conduct supervision
- voltar
- Banking conduct supervision
- Objectives
- Regulation
- Oversight
- Financial education
- Banking Conduct Supervision Forum
-
Microprudential
- voltar
- Microprudential
- Objectives and principles
- Priorities
- Supervisory Review and Evaluation Process
- Duty to report
- Reporting obligations of supervised institutions
- Authorisations
- Supervision of culture and governance
- Suitability of members of the management and supervisory bodies and key function holders
- Adequação dos titulares de funções essenciais
- Suitability of qualifying shareholders
- European Market Infrastructure Regulation (EMIR)
- Forum on Cybersecurity and Operational Resilience
- See more
-
Money laundering and terrorist financing
- voltar
- Money laundering and terrorist financing
- Banco de Portugal's functions
- Financial Action Task Force
- Restrictive measures
- Registration of virtual assets service providers
- Report on the activity carried out in Portugal under the freedom to provide services
- Documents
- Legislation and rules
- Forum on the Prevention of Money Laundering and Terrorist Financing
-
Illicit financial activity
- voltar
- Illicit financial activity
- Unauthorised activity
- Public warnings
- Advice
- Brexit
-
Monetary policy
- voltar
- Monetary policy
- Definition and strategy
-
Information systems
- voltar
- Information systems
- SITENDER, COLMS and TEB
- Eurosystem Collateral Management System
-
Interest rates
- voltar
- Interest rates
- Official and reference interest rates
-
Implementation
- voltar
- Implementation
- Instruments
- Collateral
- Counterparties
- Other monetary policy measures
-
Payment systems
- voltar
- Payment systems
-
Introduction
- voltar
- Introduction
- Banco de Portugal's functions
-
Confirmation of Payee/Payer and SPIN
- voltar
- Confirmation of Payee/Payer and SPIN
- Confirmation of Payee/Payer
- SPIN
- Digital Euro
-
Payment instruments
- voltar
- Payment instruments
- About
- Cards
- Cheques
- Direct debits
- Credit transfers
- Instant transfers
- IBAN
-
Payment services under the PSD2
- voltar
- Payment services under the PSD2
- About
- Strong customer authentication
- Account information services and payment initiation services
-
Virtual assets
- voltar
- Virtual assets
- How does it work?
- Market Infrastructure
-
Cooperation with the market
- voltar
- Cooperation with the market
- CISP
- Payment Systems Forum
- AMI-SeCo-PT
- See more
-
Banknotes and coins
- voltar
- Banknotes and coins
-
Banknote production
- voltar
- Banknote production
- Valora, S.A.
- Gestão da qualidade
- Cash and sustainability
- Banknotes
- Current coins
-
Commemorative and collector coins
- voltar
- Commemorative and collector coins
- Collector coins
- Commemorative coins
-
Training
- voltar
- Training
- Face-to-face and e-learning
- Anti-counterfeiting
- For professionals
Search
Tags
- AGIL
- Balance of Payments
- Banco de Portugal
- Bank loans and deposits
- Banknotes and coins
- Cheques
- Collector coins
- Commemorative coin
- Cooperation
- Corporations in the Central Balance-Sheet Database
- COVID-19
- Decoder
- Digital euro
- Direct debits
- Direct investment
- EBA
- Economics in a picture
- Economic studies
- EFAP
- European Central Bank
- Financial stability
- General government financing
- Governor
- Historical archive
- IBAN
- Infographics
- Interest rate
- International banking statistics
- Investment Funds
- Library
- Macroprudential measure
- National Council of Financial Supervisors
- National financial accounts
- Non-financial sector indebtedness
- Organisation
- Other financial intermediaries, financial auxiliaries and captive financial institutions and money lenders balance sheet
- Payment cards
- Payment instruments
- Podcast
- Política Monetária
- Posição de investimento internacional
- Press release
- Public debt
- Reciprocidade voluntária
- Reserva contracíclica
- Reserva de conservação
- Reserva de O-SII
- Securities issues
- SICOI
- Single Supervisory Mechanism
- Sistemas de Pagamentos
- SITENDER
- Statistical Press Release
- Statistics
- Supervisão
- Sustainability
- T2S
- TARGET2
- TARGET2-Securites
- Transferências
- Vídeo
- Virtual assets
Ano
- 2024
- 2023
- 2022
- 2021
- 2020
- 2019
- 2018
- 2017
- 2016
- 2015
- 2014
- 2013
- 2012
- 2011
- 2010
- 2009
- 2008
- 2007
- 2006
- 2005
- 2004
- 2003
- 2002
- 2001
- 2000
- 1999
- 1998
- 1997
- 1996
- 1995
- 1994
- 1993
- 1992
- 1991
- 1990
- 1989
- 1988
- 1987
- 1986
- 1985
- 1984
- 1983
- 1982
- 1981
- 1979
- 1978
- 1974
- 1969
- 1962
- 1957
- 1953
- 1950
- 1947
- 1940
- 1933
- 1932
- 1929
- 1927
- 1926
- 1922
- 1920
- 1917
- 1916
- 1915
- 1914
- 1913
- 1912
- 1911
- 1896
- 1876
- 1864
- 1844
Related Pages
Strong customer authentication
Related Documents
Related links
As of 14 September 2019 payment service providers (PSPs) must apply strong customer authentication (SCA) where the customer:
- Accesses its payment account online;
- Initiates an electronic payment transaction;
- Carries out any action through a remote channel which may imply a risk of payment fraud or other abuses.
Strong customer authentication means that a PSP must ask the customer for two or more elements categorised as:
- Knowledge - something the user knows (e.g. PIN or password);
- Possession - something the user possesses (e.g. one-time password, phone or payment card);
- Inherence - something the user is (e.g. fingerprint).
The two elements requested by the PSP must be in different categories.
For remote payment transactions, strong customer authentication must also include elements which dynamically link the transaction to the specific amount and payee.
As a rule, payment service providers must apply strong customer authentication. However, in some cases, PSPs may choose not to apply strong customer authentication. These exemptions may be defined based on the transaction’s risk level, the amount, the recurrence and the payment channel used for its execution.
In cases where the payment service provider chooses not to apply strong customer authentication, the user cannot be held liable should the payment transaction be executed incorrectly, and the PSP takes responsibility for its decision.
For instance, toll payments using services such as Via Verde, recurring credit transfers or credit transfers to trusted beneficiaries, and payments under EUR 30 that meet certain conditions may be exempted from the application of strong customer authentication.
Strong customer authentication for card-based e-commerce
The strong customer authentication requirements entered into force on 14 September 2019. However, in order for the European market to better prepare itself and consequently minimise the impact of the new regulatory framework on e-commerce, the EBA has determined that competent authorities could make use of supervisory flexibility regarding e-commerce card-based payment transactions until 31 December 2020.
From 31 December 2020, banks/payment service providers must apply the strong customer authentication requirements in e-commerce card-based payment transactions.
To supplement the PSD2, the European Banking Authority (EBA) has drawn up a set of regulatory technical standards (RTS) for strong customer authentication, which are included in Commission Delegated Regulation (EU) 2018/389 of 27 November 2017. This Regulation is directly applicable in all European Union Member States from 14 September 2019 onwards.
Chapter III of the Regulation sets forth the cases in which the payment service provider (PSP) may choose not to apply strong customer authentication. In particular, Article 17 establishes that PSPs may be allowed not to apply strong customer authentication, in respect of legal persons initiating electronic payment transactions through the use of dedicated payment processes or protocols, where the competent authority, i.e. Banco de Portugal, is satisfied that those processes or protocols guarantee appropriate levels of security.
Thus, Banco de Portugal has decided that PSPs may be allowed not to apply strong customer authentication, in respect of legal persons initiating electronic payment transactions through the use of the payment processes or protocols available here (in Portuguese only).
Those PSPs wishing not to apply strong customer authentication for these or other secure corporate payment processes or protocols must request permission from Banco de Portugal in advance.
The EBA has also published an ‘Opinion on the elements of strong customer authentication under PSD2’, providing a list of the authentication approaches that are or not considered to be SCA compliant, supplementing the information provided in the ‘Opinion on the implementation of the RTS on SCA and CSC’.
To provide additional clarifications to the market, the EBA has also published a set of questions and answers on the PSD2 that are available for consultation on its website.
With the Opinion on the deadline and process for completing the migration to strong customer authentication (SCA) for e-commerce card-based payment transactions, the EBA has allowed competent authorities to make use of supervisory flexibility regarding strong customer authentication rules for card-based e-commerce up to 31 December 2020. It has also set out a number of phased measures to be adopted by payment service providers (card issuers and acquirers) and monitored by the competent authorities.